PT-2025-36121 · Tp Link Systems+1 · Festa Gateways+15

Published 2025-09-05 · Updated 2025-10-26 · CVE-2025-6541

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description An arbitrary OS command may be executed on the product by a user who can log in to the web management interface. This allows for potential system compromise through the execution of unauthorized commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-6541

Affected Products

Festa Gateways

Omada Pro Gateways

Omada Gateways

Er605 Firmware

Er706W-4G Firmware

Er706W Firmware

Er707-M2 Firmware

Er7206 Firmware

Er7212Pc Firmware

Er7412-M2 Firmware

Er8411 Firmware

Fr205 Firmware

Fr307-M2 Firmware

Fr365 Firmware

G36 Firmware

G611 Firmware

References · 19

• https://nvd.nist.gov/vuln/detail/CVE-2025-6541 · Security Note
• https://support.omadanetworks.com/en/document/108455 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6541 · Vendor Advisory
• https://twitter.com/zoomeye_team/status/1980577026210951255 · Twitter Post
• https://tp-link.com/us/business-networking/soho-festa-gateway · Note
• https://twitter.com/TweetThreatNews/status/1980771071922970993 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1od0cwa/tplink_patches_four_omada_gateway_flaws_two_allow · Reddit Post
• https://omadanetworks.com/us/business-networking/all-omada-router · Note
• https://t.me/cveNotify/139546 · Telegram Post
• https://twitter.com/cracbot/status/1982401863443267751 · Twitter Post
• https://omadanetworks.com/us/business-networking/omada-pro-router-wired-router · Note
• https://reddit.com/r/pwnhub/comments/1odoa4x/critical_vulnerabilities_patched_in_tplink_omada · Reddit Post
• https://reddit.com/r/Omada_Networks/comments/1ocy6ia/tplink_warns_of_critical_command_injection_flaw · Reddit Post
• https://twitter.com/CveFindCom/status/1980441301704139067 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1963884059618103661 · Twitter Post